You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@sling.apache.org by Carl Hall <ca...@hallwaytech.com> on 2011/01/13 04:11:11 UTC
Re: AW: Sling+ModeShape
We (Sakai Project) are working to replace JCR with a non-JCR backend
(Cassandra and any JDBC; our mail list details the reasons and factors).
While this isn't JackRabbit -> ModeShape (staying with JCR will be much
easier), we can certainly attest that changing the storage engine is
possible with some work. The Sling code does a great job of decoupling
itself from the storage mechanism.
On Fri, Dec 17, 2010 at 10:27 AM, Alessandro Novarini <
a.novarini@sourcesense.com> wrote:
> Hi Simon,
>
> Fine for me, we should start working on the server bundle soon.
> I'll let you know what our progresses are.
>
> Thanks
> Ale
>
>
> On Dec 17, 2010, at 2:28 PM, Gunzenreiner Simon wrote:
>
> > Hi Ale
> >
> > I posted this question originally. Just to give you an update on where we
> stand - we haven't started this work yet, and it probably will be mid
> January until we do. I suggest we share our findings on this list ...
> >
> > Regards
> > Simon
> >
> > -----Ursprüngliche Nachricht-----
> > Von: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
> > Gesendet: Mittwoch, 15. Dezember 2010 18:43
> > An: users@sling.apache.org
> > Betreff: Sling+ModeShape
> >
> > Hello list,
> >
> > I've just subscribed because I would like to know if any progress has
> been made on the replacement of Jackrabbit with another JCR implementation,
> as discussed here:
> >
> http://dev.day.com/discussion-groups/content/lists/sling-users/2010-11/2010-11-16_Replacing_jackrabbit_with_other_JCR_implementation_Gunzenreiner_Simon.html
> >
> > I've tried in the last couple of days to work on it too, taking as sample
> the org.apache.sling.auth.openid bundle, and I've had some hard time because
> at the moment I have little knowledge of ModeShape; anyway, if there was the
> will to work openly on the project, I would be glad to contribute in some
> way.
> >
> > I don't have the original thread as email so sorry for not directly
> replying to it.
> >
> > Thanks
> > Ale
>
>
Re: Sling+ModeShape
Posted by Carsten Ziegeler <cz...@apache.org>.
Alexander Klimetschek wrote
>
> I agree, and I don't propose to take the resource API away. All I am
> saying is that it should be kept read-only.
>
Ok, let's agree that we disagree wrt to CRUD and Sling :) Especially as
the resource api already provides the update function - so basically
missing is just create and delete; while delete is easy, create is the
more difficult operation.
Regards
Carsten
--
Carsten Ziegeler
cziegeler@apache.org
Re: Sling+ModeShape
Posted by Alexander Klimetschek <ak...@adobe.com>.
On 17.01.11 16:00, "Carsten Ziegeler" <cz...@apache.org> wrote:
>And with Sling's resource API you get an even simpler API on top of it :)
>
>At one point in time, we'll be able to do CRUD through the resource api,
>it's not much left to do there anyway and this will allow to write
>complete applications just based on the resource api. And developers
>will benefit from all the Sling features - In contrast to JCR which is
>an API, Sling is a framework with the aim to make developers live easier.
Yes, but we are talking specifically about the Sling Resource API here.
And so far that has been geared towards a read-only, small and efficient
API, that is easy to use. Which it implemented perfectly.
However, I strongly expect that adding write operations in the API will
make it "too" complex. Especially because then you open a whole new set of
wishes from all sides, which in the end will not give you a good API, I
think.
>I see a lot of benefits, use cases and scenarios where the current
>available (open source ) implementations are lacking functionality. In
>addition, I have use cases where I want to run Sling without a
>repository underneath or with several different repository mount at
>different locations in the resource tree.
>Just think about how easy it is to mount a file directory or resources
>from within a bundle into the resource tree - this works today. Of
>course this is doable from within a repository, but especially when I
>think about OSGi resources it seems like the wrong approach :)
I agree, and I don't propose to take the resource API away. All I am
saying is that it should be kept read-only.
Regards,
Alex
--
Alexander Klimetschek
Developer // Adobe (Day) // Berlin - Basel
Re: Sling+ModeShape
Posted by Carsten Ziegeler <cz...@apache.org>.
Alexander Klimetschek wrote
> On 14.01.11 22:33, "Carl Hall" <ca...@hallwaytech.com> wrote:
>>
>> On Fri, Jan 14, 2011 at 2:47 AM, Carsten Ziegeler
>> <cz...@apache.org>wrote:
>>> We have more features on our list for the resource resolver
>>> (factory/provider) which would allow to create, update and delete
>>> resources as well (I think there is a wiki page regarding this). So if
>>> you need something in this area, maybe it's now a good time to address
>>> these things
>>
>> The resource resolver and resource provider have been invaluable to us.
>> The
>> resource layer in general has made our work much easier.
>
> Please note that the current value of the resource API over the JCR API is
> only that it is simpler, thus more quickly to implement with some custom
> backend. If more and more is added to the Resource API, especially all the
> complexities of write operations, this value will be completely lost, and
> I would urge everyone doing so to implement the needed subset of the JCR
> API instead.
>
> Federation/virtual mounting (which is another useful feature of the
> resource API) can also be done with the JCR API as modeshape shows or
> something that we have in our proprietary CRX repository here at Adobe/Day.
>
> It all just boils down to the development effort... but with JCR you get a
> well-though out standard.
>
And with Sling's resource API you get an even simpler API on top of it :)
At one point in time, we'll be able to do CRUD through the resource api,
it's not much left to do there anyway and this will allow to write
complete applications just based on the resource api. And developers
will benefit from all the Sling features - In contrast to JCR which is
an API, Sling is a framework with the aim to make developers live easier.
I see a lot of benefits, use cases and scenarios where the current
available (open source ) implementations are lacking functionality. In
addition, I have use cases where I want to run Sling without a
repository underneath or with several different repository mount at
different locations in the resource tree.
Just think about how easy it is to mount a file directory or resources
from within a bundle into the resource tree - this works today. Of
course this is doable from within a repository, but especially when I
think about OSGi resources it seems like the wrong approach :)
I don't see the Sling API competing with the JCR API - as I said, Sling
is framework :)
Regards
Carsten
--
Carsten Ziegeler
cziegeler@apache.org
Re: Sling+ModeShape
Posted by Alexander Klimetschek <ak...@adobe.com>.
On 14.01.11 22:33, "Carl Hall" <ca...@hallwaytech.com> wrote:
>
>On Fri, Jan 14, 2011 at 2:47 AM, Carsten Ziegeler
><cz...@apache.org>wrote:
>>We have more features on our list for the resource resolver
>> (factory/provider) which would allow to create, update and delete
>> resources as well (I think there is a wiki page regarding this). So if
>> you need something in this area, maybe it's now a good time to address
>> these things
>
>The resource resolver and resource provider have been invaluable to us.
>The
>resource layer in general has made our work much easier.
Please note that the current value of the resource API over the JCR API is
only that it is simpler, thus more quickly to implement with some custom
backend. If more and more is added to the Resource API, especially all the
complexities of write operations, this value will be completely lost, and
I would urge everyone doing so to implement the needed subset of the JCR
API instead.
Federation/virtual mounting (which is another useful feature of the
resource API) can also be done with the JCR API as modeshape shows or
something that we have in our proprietary CRX repository here at Adobe/Day.
It all just boils down to the development effort... but with JCR you get a
well-though out standard.
Just my 2 cents,
Alex
--
Alexander Klimetschek
Developer // Adobe (Day) // Berlin - Basel
Re: Sling+ModeShape
Posted by Carl Hall <ca...@hallwaytech.com>.
Hey Carsten,
On Fri, Jan 14, 2011 at 2:47 AM, Carsten Ziegeler <cz...@apache.org>wrote:
> Hi,
>
> Carl Hall wrote
> > We (Sakai Project) are working to replace JCR with a non-JCR backend
> > (Cassandra and any JDBC; our mail list details the reasons and factors).
>
> I'm just curious, can you please give some direct pointers to the
> discussion?
I think Ian's blog posts [1][2] best detail what we ran into. In short, our
usage started going outside the intended usage of JCR. We found that we
have a lot of data editors and the amount of ACL changes we make are not
conducive to using JackRabbit. JR worked great until we tried to destroy it
with a couple hundred threads writing data. Reads looked good the whole
time but writing that much made JR sad. I spoke with Ard of JR at ApacheCon
and in email about our usage. He wasn't surprised of our findings given our
amount of writes.
> While this isn't JackRabbit -> ModeShape (staying with JCR will be much
> > easier), we can certainly attest that changing the storage engine is
> > possible with some work. The Sling code does a great job of decoupling
> > itself from the storage mechanism.
> We have more features on our list for the resource resolver
> (factory/provider) which would allow to create, update and delete
> resources as well (I think there is a wiki page regarding this). So if
> you need something in this area, maybe it's now a good time to address
> these things
The resource resolver and resource provider have been invaluable to us. The
resource layer in general has made our work much easier.
> Regards
> Carsten
>
1 http://blog.tfd.co.uk/2010/10/17/wrong-content-model/
2 http://blog.tfd.co.uk/2010/10/15/jackrabbit-performance/
>
> >
> >
> > On Fri, Dec 17, 2010 at 10:27 AM, Alessandro Novarini <
> > a.novarini@sourcesense.com> wrote:
> >
> >> Hi Simon,
> >>
> >> Fine for me, we should start working on the server bundle soon.
> >> I'll let you know what our progresses are.
> >>
> >> Thanks
> >> Ale
> >>
> >>
> >> On Dec 17, 2010, at 2:28 PM, Gunzenreiner Simon wrote:
> >>
> >>> Hi Ale
> >>>
> >>> I posted this question originally. Just to give you an update on where
> we
> >> stand - we haven't started this work yet, and it probably will be mid
> >> January until we do. I suggest we share our findings on this list ...
> >>>
> >>> Regards
> >>> Simon
> >>>
> >>> -----Ursprüngliche Nachricht-----
> >>> Von: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
> >>> Gesendet: Mittwoch, 15. Dezember 2010 18:43
> >>> An: users@sling.apache.org
> >>> Betreff: Sling+ModeShape
> >>>
> >>> Hello list,
> >>>
> >>> I've just subscribed because I would like to know if any progress has
> >> been made on the replacement of Jackrabbit with another JCR
> implementation,
> >> as discussed here:
> >>>
> >>
> http://dev.day.com/discussion-groups/content/lists/sling-users/2010-11/2010-11-16_Replacing_jackrabbit_with_other_JCR_implementation_Gunzenreiner_Simon.html
> >>>
> >>> I've tried in the last couple of days to work on it too, taking as
> sample
> >> the org.apache.sling.auth.openid bundle, and I've had some hard time
> because
> >> at the moment I have little knowledge of ModeShape; anyway, if there was
> the
> >> will to work openly on the project, I would be glad to contribute in
> some
> >> way.
> >>>
> >>> I don't have the original thread as email so sorry for not directly
> >> replying to it.
> >>>
> >>> Thanks
> >>> Ale
> >>
> >>
> >
>
>
> --
> Carsten Ziegeler
> cziegeler@apache.org
>
Re: Sling+ModeShape
Posted by Carsten Ziegeler <cz...@apache.org>.
Hi,
Carl Hall wrote
> We (Sakai Project) are working to replace JCR with a non-JCR backend
> (Cassandra and any JDBC; our mail list details the reasons and factors).
I'm just curious, can you please give some direct pointers to the
discussion?
> While this isn't JackRabbit -> ModeShape (staying with JCR will be much
> easier), we can certainly attest that changing the storage engine is
> possible with some work. The Sling code does a great job of decoupling
> itself from the storage mechanism.
We have more features on our list for the resource resolver
(factory/provider) which would allow to create, update and delete
resources as well (I think there is a wiki page regarding this). So if
you need something in this area, maybe it's now a good time to address
these things
Regards
Carsten
>
>
> On Fri, Dec 17, 2010 at 10:27 AM, Alessandro Novarini <
> a.novarini@sourcesense.com> wrote:
>
>> Hi Simon,
>>
>> Fine for me, we should start working on the server bundle soon.
>> I'll let you know what our progresses are.
>>
>> Thanks
>> Ale
>>
>>
>> On Dec 17, 2010, at 2:28 PM, Gunzenreiner Simon wrote:
>>
>>> Hi Ale
>>>
>>> I posted this question originally. Just to give you an update on where we
>> stand - we haven't started this work yet, and it probably will be mid
>> January until we do. I suggest we share our findings on this list ...
>>>
>>> Regards
>>> Simon
>>>
>>> -----Ursprüngliche Nachricht-----
>>> Von: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
>>> Gesendet: Mittwoch, 15. Dezember 2010 18:43
>>> An: users@sling.apache.org
>>> Betreff: Sling+ModeShape
>>>
>>> Hello list,
>>>
>>> I've just subscribed because I would like to know if any progress has
>> been made on the replacement of Jackrabbit with another JCR implementation,
>> as discussed here:
>>>
>> http://dev.day.com/discussion-groups/content/lists/sling-users/2010-11/2010-11-16_Replacing_jackrabbit_with_other_JCR_implementation_Gunzenreiner_Simon.html
>>>
>>> I've tried in the last couple of days to work on it too, taking as sample
>> the org.apache.sling.auth.openid bundle, and I've had some hard time because
>> at the moment I have little knowledge of ModeShape; anyway, if there was the
>> will to work openly on the project, I would be glad to contribute in some
>> way.
>>>
>>> I don't have the original thread as email so sorry for not directly
>> replying to it.
>>>
>>> Thanks
>>> Ale
>>
>>
>
--
Carsten Ziegeler
cziegeler@apache.org
Re: AW: Sling+ModeShape
Posted by Alessandro Novarini <a....@sourcesense.com>.
Hello,
Thanks for your feedback.
We started yesterday working on this project, and we still think the integration won't be too hard to get in reasonable time.
Also, as a "plan B", we think it could be a good compromise going to a jcr repository (modeshape) connected to sling using jndi/rmi, since these two options are already available when you configure sling with a proper url, if we don't get it wrong.
This just in case the attempt to embed the repository will fail, think that as I said we hope it won't happen (fingers crossed).
Thanks again
Ale
On Jan 13, 2011, at 4:11 AM, Carl Hall wrote:
> We (Sakai Project) are working to replace JCR with a non-JCR backend
> (Cassandra and any JDBC; our mail list details the reasons and factors).
> While this isn't JackRabbit -> ModeShape (staying with JCR will be much
> easier), we can certainly attest that changing the storage engine is
> possible with some work. The Sling code does a great job of decoupling
> itself from the storage mechanism.
>
>
> On Fri, Dec 17, 2010 at 10:27 AM, Alessandro Novarini <
> a.novarini@sourcesense.com> wrote:
>
>> Hi Simon,
>>
>> Fine for me, we should start working on the server bundle soon.
>> I'll let you know what our progresses are.
>>
>> Thanks
>> Ale
>>
>>
>> On Dec 17, 2010, at 2:28 PM, Gunzenreiner Simon wrote:
>>
>>> Hi Ale
>>>
>>> I posted this question originally. Just to give you an update on where we
>> stand - we haven't started this work yet, and it probably will be mid
>> January until we do. I suggest we share our findings on this list ...
>>>
>>> Regards
>>> Simon
>>>
>>> -----Ursprüngliche Nachricht-----
>>> Von: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
>>> Gesendet: Mittwoch, 15. Dezember 2010 18:43
>>> An: users@sling.apache.org
>>> Betreff: Sling+ModeShape
>>>
>>> Hello list,
>>>
>>> I've just subscribed because I would like to know if any progress has
>> been made on the replacement of Jackrabbit with another JCR implementation,
>> as discussed here:
>>>
>> http://dev.day.com/discussion-groups/content/lists/sling-users/2010-11/2010-11-16_Replacing_jackrabbit_with_other_JCR_implementation_Gunzenreiner_Simon.html
>>>
>>> I've tried in the last couple of days to work on it too, taking as sample
>> the org.apache.sling.auth.openid bundle, and I've had some hard time because
>> at the moment I have little knowledge of ModeShape; anyway, if there was the
>> will to work openly on the project, I would be glad to contribute in some
>> way.
>>>
>>> I don't have the original thread as email so sorry for not directly
>> replying to it.
>>>
>>> Thanks
>>> Ale
>>
>>
RE: AW: Sling+ModeShape
Posted by Mike Müller <mi...@mysign.ch>.
Hi Ale
Thanks for sharing your experiences with us. I will have a look at it.
I hope we hear more from you as you make progress.
best regards
mike
> -----Original Message-----
> From: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
> Sent: Thursday, May 05, 2011 11:48 AM
> To: users@sling.apache.org
> Subject: Re: AW: Sling+ModeShape
>
> Hello everyone,
>
> This is another update about our attempt to replace Jackrabbit with
> ModeShape in Sling.
>
> First of all, sorry for the long wait, but we needed to be sure we had the OK
> from our
> customer before releasing what we have done in this period.
>
> The good news is that we are ready to release our work, you can find
> the projects here:
>
> https://github.com/sourcesense/stone
>
> and here:
>
> https://github.com/sourcesense/modeshape-stone
>
> The second one is basically a fork of modeshape with some patches we still
> have
> to submit, but at the moment we're unsure if these are "real" fixes or not;
> maybe some feedback from you will help to clarify this matter.
>
> The bad news is that the project, in the interest of releasing early and
> releasing often, is not fully working yet.
>
> We have two blocking issues, with two different configurations, and you can
> read more about them in the 'Issues' section of the project site.
>
> Obviously every feedback (and contribution) will be well accepted, and
> for the ones interested, please don't hesitate to ask also using our
> internal mail alias stone@sourcesense.com
>
> Thanks for your patience and understanding
> Ale
>
> On Feb 15, 2011, at 12:02 PM, Felix Meschberger wrote:
>
> > Hi
> >
> > thanks for the feedback and congratulations to your success.
> >
> > Along with Mike Moulton and Mike Müller I invite to contribute back
> > either in the form of contributing the project setup or with some
> > documentation on our wiki.
> >
> > Thanks !
> >
> > Regards
> > Felix
> >
> > Am Mittwoch, den 09.02.2011, 15:54 +0000 schrieb Alessandro Novarini:
> >> Hello list,
> >>
> >> As promised, here a quick update and a not-so-quick question.
> >>
> >> I think we're almost done with the modeshape-server bundle, we fought
> a lot with the class loading but now it looks good.
> >>
> >> But...
> >>
> >> We started this work assuming that replacing the jackrabbit-server bundle
> was enough to have a sling working, as Carl also confirmed right below.
> >> Probably we still miss something, but we are now struggling with
> authentication and authorization; in particular two issues:
> >>
> >> ModeShape relies on JAAS to check for valid credentials, and at the
> moment it's complaining that no configuration is found.
> >> We tried to add a jaas config file, made Sling point to that file, but we
> don't know if there are LoginModules already available or if we need to add
> one to the classpath (we asked to ModeShape forum and they suggested to
> look at JBoss Picketbox [1]).
> >>
> >> So at the moment we replaced the mechanism of authentication with a
> custom one, and ModeShape is quite happy with that, even though we
> would like to align the functionality with what Sling is using and is expecting
> by jackrabbit.
> >> We came across a strange side-effect there, because now from the web
> console we cannot do anything without having Sling asking for a login.
> >> Useless to say that whatever we enter, the login fails :(
> >>
> >> Going a step further... we're examining the class
> org.apache.sling.extensions.webconsolesecurityprovider.internal.SlingWebC
> onsoleSecurityProvider, the one that tries to login to the repository passing a
> SimpleCredentials (triggering the JAAS mechanism skipping our custom one)
> - method authenticate(String, String).
> >>
> >> What scared us was the code just after the repository.login(creds): it
> seems a bit implementation-dependent, since all the code is into an if
> (session instanceof JackrabbitSession), otherwise the method will return null
> (no success).
> >>
> >> Do you confirm what we are thinking, that even fixing our current issue,
> we're going to have a "broken" web console?
> >>
> >> Thank you in advance
> >> Ale
> >>
> >>
> >> On Jan 13, 2011, at 4:11 AM, Carl Hall wrote:
> >>
> >>> We (Sakai Project) are working to replace JCR with a non-JCR backend
> >>> (Cassandra and any JDBC; our mail list details the reasons and factors).
> >>> While this isn't JackRabbit -> ModeShape (staying with JCR will be much
> >>> easier), we can certainly attest that changing the storage engine is
> >>> possible with some work. The Sling code does a great job of decoupling
> >>> itself from the storage mechanism.
> >>>
> >>>
> >>> On Fri, Dec 17, 2010 at 10:27 AM, Alessandro Novarini <
> >>> a.novarini@sourcesense.com> wrote:
> >>>
> >>>> Hi Simon,
> >>>>
> >>>> Fine for me, we should start working on the server bundle soon.
> >>>> I'll let you know what our progresses are.
> >>>>
> >>>> Thanks
> >>>> Ale
> >>>>
> >>>>
> >>>> On Dec 17, 2010, at 2:28 PM, Gunzenreiner Simon wrote:
> >>>>
> >>>>> Hi Ale
> >>>>>
> >>>>> I posted this question originally. Just to give you an update on where
> we
> >>>> stand - we haven't started this work yet, and it probably will be mid
> >>>> January until we do. I suggest we share our findings on this list ...
> >>>>>
> >>>>> Regards
> >>>>> Simon
> >>>>>
> >>>>> -----Ursprüngliche Nachricht-----
> >>>>> Von: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
> >>>>> Gesendet: Mittwoch, 15. Dezember 2010 18:43
> >>>>> An: users@sling.apache.org
> >>>>> Betreff: Sling+ModeShape
> >>>>>
> >>>>> Hello list,
> >>>>>
> >>>>> I've just subscribed because I would like to know if any progress has
> >>>> been made on the replacement of Jackrabbit with another JCR
> implementation,
> >>>> as discussed here:
> >>>>>
> >>>> http://dev.day.com/discussion-groups/content/lists/sling-users/2010-
> 11/2010-11-
> 16_Replacing_jackrabbit_with_other_JCR_implementation_Gunzenreiner_S
> imon.html
> >>>>>
> >>>>> I've tried in the last couple of days to work on it too, taking as sample
> >>>> the org.apache.sling.auth.openid bundle, and I've had some hard time
> because
> >>>> at the moment I have little knowledge of ModeShape; anyway, if there
> was the
> >>>> will to work openly on the project, I would be glad to contribute in
> some
> >>>> way.
> >>>>>
> >>>>> I don't have the original thread as email so sorry for not directly
> >>>> replying to it.
> >>>>>
> >>>>> Thanks
> >>>>> Ale
> >>>>
> >>>>
> >>
> >
> >
Re: AW: Sling+ModeShape
Posted by Alessandro Novarini <a....@sourcesense.com>.
Hello everyone,
This is another update about our attempt to replace Jackrabbit with ModeShape in Sling.
First of all, sorry for the long wait, but we needed to be sure we had the OK from our
customer before releasing what we have done in this period.
The good news is that we are ready to release our work, you can find
the projects here:
https://github.com/sourcesense/stone
and here:
https://github.com/sourcesense/modeshape-stone
The second one is basically a fork of modeshape with some patches we still have
to submit, but at the moment we're unsure if these are "real" fixes or not;
maybe some feedback from you will help to clarify this matter.
The bad news is that the project, in the interest of releasing early and releasing often, is not fully working yet.
We have two blocking issues, with two different configurations, and you can
read more about them in the 'Issues' section of the project site.
Obviously every feedback (and contribution) will be well accepted, and
for the ones interested, please don't hesitate to ask also using our
internal mail alias stone@sourcesense.com
Thanks for your patience and understanding
Ale
On Feb 15, 2011, at 12:02 PM, Felix Meschberger wrote:
> Hi
>
> thanks for the feedback and congratulations to your success.
>
> Along with Mike Moulton and Mike Müller I invite to contribute back
> either in the form of contributing the project setup or with some
> documentation on our wiki.
>
> Thanks !
>
> Regards
> Felix
>
> Am Mittwoch, den 09.02.2011, 15:54 +0000 schrieb Alessandro Novarini:
>> Hello list,
>>
>> As promised, here a quick update and a not-so-quick question.
>>
>> I think we're almost done with the modeshape-server bundle, we fought a lot with the class loading but now it looks good.
>>
>> But...
>>
>> We started this work assuming that replacing the jackrabbit-server bundle was enough to have a sling working, as Carl also confirmed right below.
>> Probably we still miss something, but we are now struggling with authentication and authorization; in particular two issues:
>>
>> ModeShape relies on JAAS to check for valid credentials, and at the moment it's complaining that no configuration is found.
>> We tried to add a jaas config file, made Sling point to that file, but we don't know if there are LoginModules already available or if we need to add one to the classpath (we asked to ModeShape forum and they suggested to look at JBoss Picketbox [1]).
>>
>> So at the moment we replaced the mechanism of authentication with a custom one, and ModeShape is quite happy with that, even though we would like to align the functionality with what Sling is using and is expecting by jackrabbit.
>> We came across a strange side-effect there, because now from the web console we cannot do anything without having Sling asking for a login.
>> Useless to say that whatever we enter, the login fails :(
>>
>> Going a step further... we're examining the class org.apache.sling.extensions.webconsolesecurityprovider.internal.SlingWebConsoleSecurityProvider, the one that tries to login to the repository passing a SimpleCredentials (triggering the JAAS mechanism skipping our custom one) - method authenticate(String, String).
>>
>> What scared us was the code just after the repository.login(creds): it seems a bit implementation-dependent, since all the code is into an if (session instanceof JackrabbitSession), otherwise the method will return null (no success).
>>
>> Do you confirm what we are thinking, that even fixing our current issue, we're going to have a "broken" web console?
>>
>> Thank you in advance
>> Ale
>>
>>
>> On Jan 13, 2011, at 4:11 AM, Carl Hall wrote:
>>
>>> We (Sakai Project) are working to replace JCR with a non-JCR backend
>>> (Cassandra and any JDBC; our mail list details the reasons and factors).
>>> While this isn't JackRabbit -> ModeShape (staying with JCR will be much
>>> easier), we can certainly attest that changing the storage engine is
>>> possible with some work. The Sling code does a great job of decoupling
>>> itself from the storage mechanism.
>>>
>>>
>>> On Fri, Dec 17, 2010 at 10:27 AM, Alessandro Novarini <
>>> a.novarini@sourcesense.com> wrote:
>>>
>>>> Hi Simon,
>>>>
>>>> Fine for me, we should start working on the server bundle soon.
>>>> I'll let you know what our progresses are.
>>>>
>>>> Thanks
>>>> Ale
>>>>
>>>>
>>>> On Dec 17, 2010, at 2:28 PM, Gunzenreiner Simon wrote:
>>>>
>>>>> Hi Ale
>>>>>
>>>>> I posted this question originally. Just to give you an update on where we
>>>> stand - we haven't started this work yet, and it probably will be mid
>>>> January until we do. I suggest we share our findings on this list ...
>>>>>
>>>>> Regards
>>>>> Simon
>>>>>
>>>>> -----Ursprüngliche Nachricht-----
>>>>> Von: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
>>>>> Gesendet: Mittwoch, 15. Dezember 2010 18:43
>>>>> An: users@sling.apache.org
>>>>> Betreff: Sling+ModeShape
>>>>>
>>>>> Hello list,
>>>>>
>>>>> I've just subscribed because I would like to know if any progress has
>>>> been made on the replacement of Jackrabbit with another JCR implementation,
>>>> as discussed here:
>>>>>
>>>> http://dev.day.com/discussion-groups/content/lists/sling-users/2010-11/2010-11-16_Replacing_jackrabbit_with_other_JCR_implementation_Gunzenreiner_Simon.html
>>>>>
>>>>> I've tried in the last couple of days to work on it too, taking as sample
>>>> the org.apache.sling.auth.openid bundle, and I've had some hard time because
>>>> at the moment I have little knowledge of ModeShape; anyway, if there was the
>>>> will to work openly on the project, I would be glad to contribute in some
>>>> way.
>>>>>
>>>>> I don't have the original thread as email so sorry for not directly
>>>> replying to it.
>>>>>
>>>>> Thanks
>>>>> Ale
>>>>
>>>>
>>
>
>
Re: AW: Sling+ModeShape
Posted by Felix Meschberger <fm...@adobe.com>.
Hi
thanks for the feedback and congratulations to your success.
Along with Mike Moulton and Mike Müller I invite to contribute back
either in the form of contributing the project setup or with some
documentation on our wiki.
Thanks !
Regards
Felix
Am Mittwoch, den 09.02.2011, 15:54 +0000 schrieb Alessandro Novarini:
> Hello list,
>
> As promised, here a quick update and a not-so-quick question.
>
> I think we're almost done with the modeshape-server bundle, we fought a lot with the class loading but now it looks good.
>
> But...
>
> We started this work assuming that replacing the jackrabbit-server bundle was enough to have a sling working, as Carl also confirmed right below.
> Probably we still miss something, but we are now struggling with authentication and authorization; in particular two issues:
>
> ModeShape relies on JAAS to check for valid credentials, and at the moment it's complaining that no configuration is found.
> We tried to add a jaas config file, made Sling point to that file, but we don't know if there are LoginModules already available or if we need to add one to the classpath (we asked to ModeShape forum and they suggested to look at JBoss Picketbox [1]).
>
> So at the moment we replaced the mechanism of authentication with a custom one, and ModeShape is quite happy with that, even though we would like to align the functionality with what Sling is using and is expecting by jackrabbit.
> We came across a strange side-effect there, because now from the web console we cannot do anything without having Sling asking for a login.
> Useless to say that whatever we enter, the login fails :(
>
> Going a step further... we're examining the class org.apache.sling.extensions.webconsolesecurityprovider.internal.SlingWebConsoleSecurityProvider, the one that tries to login to the repository passing a SimpleCredentials (triggering the JAAS mechanism skipping our custom one) - method authenticate(String, String).
>
> What scared us was the code just after the repository.login(creds): it seems a bit implementation-dependent, since all the code is into an if (session instanceof JackrabbitSession), otherwise the method will return null (no success).
>
> Do you confirm what we are thinking, that even fixing our current issue, we're going to have a "broken" web console?
>
> Thank you in advance
> Ale
>
>
> On Jan 13, 2011, at 4:11 AM, Carl Hall wrote:
>
> > We (Sakai Project) are working to replace JCR with a non-JCR backend
> > (Cassandra and any JDBC; our mail list details the reasons and factors).
> > While this isn't JackRabbit -> ModeShape (staying with JCR will be much
> > easier), we can certainly attest that changing the storage engine is
> > possible with some work. The Sling code does a great job of decoupling
> > itself from the storage mechanism.
> >
> >
> > On Fri, Dec 17, 2010 at 10:27 AM, Alessandro Novarini <
> > a.novarini@sourcesense.com> wrote:
> >
> >> Hi Simon,
> >>
> >> Fine for me, we should start working on the server bundle soon.
> >> I'll let you know what our progresses are.
> >>
> >> Thanks
> >> Ale
> >>
> >>
> >> On Dec 17, 2010, at 2:28 PM, Gunzenreiner Simon wrote:
> >>
> >>> Hi Ale
> >>>
> >>> I posted this question originally. Just to give you an update on where we
> >> stand - we haven't started this work yet, and it probably will be mid
> >> January until we do. I suggest we share our findings on this list ...
> >>>
> >>> Regards
> >>> Simon
> >>>
> >>> -----Ursprüngliche Nachricht-----
> >>> Von: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
> >>> Gesendet: Mittwoch, 15. Dezember 2010 18:43
> >>> An: users@sling.apache.org
> >>> Betreff: Sling+ModeShape
> >>>
> >>> Hello list,
> >>>
> >>> I've just subscribed because I would like to know if any progress has
> >> been made on the replacement of Jackrabbit with another JCR implementation,
> >> as discussed here:
> >>>
> >> http://dev.day.com/discussion-groups/content/lists/sling-users/2010-11/2010-11-16_Replacing_jackrabbit_with_other_JCR_implementation_Gunzenreiner_Simon.html
> >>>
> >>> I've tried in the last couple of days to work on it too, taking as sample
> >> the org.apache.sling.auth.openid bundle, and I've had some hard time because
> >> at the moment I have little knowledge of ModeShape; anyway, if there was the
> >> will to work openly on the project, I would be glad to contribute in some
> >> way.
> >>>
> >>> I don't have the original thread as email so sorry for not directly
> >> replying to it.
> >>>
> >>> Thanks
> >>> Ale
> >>
> >>
>
Re: AW: Sling+ModeShape
Posted by Mike Moulton <mi...@meltmedia.com>.
Alessandro,
I'm curious, does your group have any plans on open-sourcing your ModeShape server bundle or donating it back to the ASF?
The reason I ask is my group is about to kick of a new project and we were going to evaluate the integration of ModeShape within Sling. Didn't want to reinvent the wheel if we don't have to.
Regards,
Mike
On Feb 10, 2011, at 9:08 AM, Alessandro Novarini wrote:
> Hi Vidar,
>
> You're right, the bundle in optional, stopping it made my bundle "work".
>
> Thanks for the help
> Ale
>
> On Feb 9, 2011, at 6:12 PM, Vidar Ramdal wrote:
>
>> AFAIK, the Web Console Security Provider bundle is completely
>> optional. You can simply leave it out, and the web console will fall
>> back to the standard authentication method (a configured single
>> username/password pair, by default admin/admin).
>>
>>
>> --
>> Vidar S. Ramdal <vi...@idium.no> - http://www.idium.no
>> Sommerrogata 13-15, N-0255 Oslo, Norway
>> + 47 22 00 84 00
>> Quando omni flunkus moritatus!
>
Re: AW: Sling+ModeShape
Posted by anjan <po...@gmail.com>.
Hi Ale, I saw the project at https://github.com/sourcesense/stone and would
like to know whether the issues mentioned were resolved or not. Were you
able to use Modeshape in Sling finally?
- Anjan
--
View this message in context: http://apache-sling.73963.n3.nabble.com/Sling-ModeShape-tp2093482p4023948.html
Sent from the Sling - Users mailing list archive at Nabble.com.
Re: AW: Sling+ModeShape
Posted by Bertrand Delacretaz <bd...@apache.org>.
Hi,
On Tue, Feb 15, 2011 at 11:55 AM, Alessandro Novarini
<a....@sourcesense.com> wrote:
> ...We have plans about releasing the bundle, code and patches (the last ones for ModeShape) as soon as we can.
> Please note that the integration is still not working, though progresses are made day by day....
Note that Apache extras might be a good place for that, see
http://code.google.com/a/apache-extras.org/hosting/ and
http://blogs.apache.org/foundation/entry/the_apache_software_foundation_launches
(unless you already have a place to publish your code)
-Bertrand
Re: AW: Sling+ModeShape
Posted by Alessandro Novarini <a....@sourcesense.com>.
Hi all,
We have plans about releasing the bundle, code and patches (the last ones for ModeShape) as soon as we can.
Please note that the integration is still not working, though progresses are made day by day.
We're willing to open our work as soon as we finish what we are being paid to do (few weeks left).
If you need to start sooner than that, feel free to ask here or privately for any help we can provide.
Thanks a lot
Ale
On Feb 14, 2011, at 11:44 PM, Mike Müller wrote:
> Hi Ale
>
> I - and maybe some others - would be interested in your Modeshape bundle.
> Can you publish the bundle and/or give some hints how you managed Modeshape to work with Sling.
> Maybe we can include this in our documentation on sling.apache.org.
>
> best regards
> mike
>
>> -----Original Message-----
>> From: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
>> Sent: Thursday, February 10, 2011 5:08 PM
>> To: users@sling.apache.org
>> Subject: Re: AW: Sling+ModeShape
>>
>> Hi Vidar,
>>
>> You're right, the bundle in optional, stopping it made my bundle "work".
>>
>> Thanks for the help
>> Ale
>>
>> On Feb 9, 2011, at 6:12 PM, Vidar Ramdal wrote:
>>
>>> AFAIK, the Web Console Security Provider bundle is completely
>>> optional. You can simply leave it out, and the web console will fall
>>> back to the standard authentication method (a configured single
>>> username/password pair, by default admin/admin).
>>>
>>>
>>> --
>>> Vidar S. Ramdal <vi...@idium.no> - http://www.idium.no
>>> Sommerrogata 13-15, N-0255 Oslo, Norway
>>> + 47 22 00 84 00
>>> Quando omni flunkus moritatus!
>
RE: AW: Sling+ModeShape
Posted by Mike Müller <mi...@mysign.ch>.
Hi Ale
I - and maybe some others - would be interested in your Modeshape bundle.
Can you publish the bundle and/or give some hints how you managed Modeshape to work with Sling.
Maybe we can include this in our documentation on sling.apache.org.
best regards
mike
> -----Original Message-----
> From: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
> Sent: Thursday, February 10, 2011 5:08 PM
> To: users@sling.apache.org
> Subject: Re: AW: Sling+ModeShape
>
> Hi Vidar,
>
> You're right, the bundle in optional, stopping it made my bundle "work".
>
> Thanks for the help
> Ale
>
> On Feb 9, 2011, at 6:12 PM, Vidar Ramdal wrote:
>
> > AFAIK, the Web Console Security Provider bundle is completely
> > optional. You can simply leave it out, and the web console will fall
> > back to the standard authentication method (a configured single
> > username/password pair, by default admin/admin).
> >
> >
> > --
> > Vidar S. Ramdal <vi...@idium.no> - http://www.idium.no
> > Sommerrogata 13-15, N-0255 Oslo, Norway
> > + 47 22 00 84 00
> > Quando omni flunkus moritatus!
Re: AW: Sling+ModeShape
Posted by Alessandro Novarini <a....@sourcesense.com>.
Hi Vidar,
You're right, the bundle in optional, stopping it made my bundle "work".
Thanks for the help
Ale
On Feb 9, 2011, at 6:12 PM, Vidar Ramdal wrote:
> AFAIK, the Web Console Security Provider bundle is completely
> optional. You can simply leave it out, and the web console will fall
> back to the standard authentication method (a configured single
> username/password pair, by default admin/admin).
>
>
> --
> Vidar S. Ramdal <vi...@idium.no> - http://www.idium.no
> Sommerrogata 13-15, N-0255 Oslo, Norway
> + 47 22 00 84 00
> Quando omni flunkus moritatus!
Re: AW: Sling+ModeShape
Posted by Vidar Ramdal <vi...@idium.no>.
On Wed, Feb 9, 2011 at 4:54 PM, Alessandro Novarini
<a....@sourcesense.com> wrote:
> Hello list,
>
> As promised, here a quick update and a not-so-quick question.
>
> I think we're almost done with the modeshape-server bundle, we fought a lot with the class loading but now it looks good.
>
> But...
>
> We started this work assuming that replacing the jackrabbit-server bundle was enough to have a sling working, as Carl also confirmed right below.
> Probably we still miss something, but we are now struggling with authentication and authorization; in particular two issues:
>
> ModeShape relies on JAAS to check for valid credentials, and at the moment it's complaining that no configuration is found.
> We tried to add a jaas config file, made Sling point to that file, but we don't know if there are LoginModules already available or if we need to add one to the classpath (we asked to ModeShape forum and they suggested to look at JBoss Picketbox [1]).
>
> So at the moment we replaced the mechanism of authentication with a custom one, and ModeShape is quite happy with that, even though we would like to align the functionality with what Sling is using and is expecting by jackrabbit.
> We came across a strange side-effect there, because now from the web console we cannot do anything without having Sling asking for a login.
> Useless to say that whatever we enter, the login fails :(
>
> Going a step further... we're examining the class org.apache.sling.extensions.webconsolesecurityprovider.internal.SlingWebConsoleSecurityProvider, the one that tries to login to the repository passing a SimpleCredentials (triggering the JAAS mechanism skipping our custom one) - method authenticate(String, String).
>
> What scared us was the code just after the repository.login(creds): it seems a bit implementation-dependent, since all the code is into an if (session instanceof JackrabbitSession), otherwise the method will return null (no success).
>
> Do you confirm what we are thinking, that even fixing our current issue, we're going to have a "broken" web console?
AFAIK, the Web Console Security Provider bundle is completely
optional. You can simply leave it out, and the web console will fall
back to the standard authentication method (a configured single
username/password pair, by default admin/admin).
--
Vidar S. Ramdal <vi...@idium.no> - http://www.idium.no
Sommerrogata 13-15, N-0255 Oslo, Norway
+ 47 22 00 84 00
Quando omni flunkus moritatus!
Re: AW: Sling+ModeShape
Posted by Alessandro Novarini <a....@sourcesense.com>.
Sorry, as usual, I forgot the reference...
[1] http://www.jboss.org/picketbox
Regards
Ale
On Feb 9, 2011, at 4:54 PM, Alessandro Novarini wrote:
> Hello list,
>
> As promised, here a quick update and a not-so-quick question.
>
> I think we're almost done with the modeshape-server bundle, we fought a lot with the class loading but now it looks good.
>
> But...
>
> We started this work assuming that replacing the jackrabbit-server bundle was enough to have a sling working, as Carl also confirmed right below.
> Probably we still miss something, but we are now struggling with authentication and authorization; in particular two issues:
>
> ModeShape relies on JAAS to check for valid credentials, and at the moment it's complaining that no configuration is found.
> We tried to add a jaas config file, made Sling point to that file, but we don't know if there are LoginModules already available or if we need to add one to the classpath (we asked to ModeShape forum and they suggested to look at JBoss Picketbox [1]).
>
> So at the moment we replaced the mechanism of authentication with a custom one, and ModeShape is quite happy with that, even though we would like to align the functionality with what Sling is using and is expecting by jackrabbit.
> We came across a strange side-effect there, because now from the web console we cannot do anything without having Sling asking for a login.
> Useless to say that whatever we enter, the login fails :(
>
> Going a step further... we're examining the class org.apache.sling.extensions.webconsolesecurityprovider.internal.SlingWebConsoleSecurityProvider, the one that tries to login to the repository passing a SimpleCredentials (triggering the JAAS mechanism skipping our custom one) - method authenticate(String, String).
>
> What scared us was the code just after the repository.login(creds): it seems a bit implementation-dependent, since all the code is into an if (session instanceof JackrabbitSession), otherwise the method will return null (no success).
>
> Do you confirm what we are thinking, that even fixing our current issue, we're going to have a "broken" web console?
>
> Thank you in advance
> Ale
>
>
> On Jan 13, 2011, at 4:11 AM, Carl Hall wrote:
>
>> We (Sakai Project) are working to replace JCR with a non-JCR backend
>> (Cassandra and any JDBC; our mail list details the reasons and factors).
>> While this isn't JackRabbit -> ModeShape (staying with JCR will be much
>> easier), we can certainly attest that changing the storage engine is
>> possible with some work. The Sling code does a great job of decoupling
>> itself from the storage mechanism.
>>
>>
>> On Fri, Dec 17, 2010 at 10:27 AM, Alessandro Novarini <
>> a.novarini@sourcesense.com> wrote:
>>
>>> Hi Simon,
>>>
>>> Fine for me, we should start working on the server bundle soon.
>>> I'll let you know what our progresses are.
>>>
>>> Thanks
>>> Ale
>>>
>>>
>>> On Dec 17, 2010, at 2:28 PM, Gunzenreiner Simon wrote:
>>>
>>>> Hi Ale
>>>>
>>>> I posted this question originally. Just to give you an update on where we
>>> stand - we haven't started this work yet, and it probably will be mid
>>> January until we do. I suggest we share our findings on this list ...
>>>>
>>>> Regards
>>>> Simon
>>>>
>>>> -----Ursprüngliche Nachricht-----
>>>> Von: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
>>>> Gesendet: Mittwoch, 15. Dezember 2010 18:43
>>>> An: users@sling.apache.org
>>>> Betreff: Sling+ModeShape
>>>>
>>>> Hello list,
>>>>
>>>> I've just subscribed because I would like to know if any progress has
>>> been made on the replacement of Jackrabbit with another JCR implementation,
>>> as discussed here:
>>>>
>>> http://dev.day.com/discussion-groups/content/lists/sling-users/2010-11/2010-11-16_Replacing_jackrabbit_with_other_JCR_implementation_Gunzenreiner_Simon.html
>>>>
>>>> I've tried in the last couple of days to work on it too, taking as sample
>>> the org.apache.sling.auth.openid bundle, and I've had some hard time because
>>> at the moment I have little knowledge of ModeShape; anyway, if there was the
>>> will to work openly on the project, I would be glad to contribute in some
>>> way.
>>>>
>>>> I don't have the original thread as email so sorry for not directly
>>> replying to it.
>>>>
>>>> Thanks
>>>> Ale
>>>
>>>
>
Re: AW: Sling+ModeShape
Posted by Alessandro Novarini <a....@sourcesense.com>.
Hello list,
As promised, here a quick update and a not-so-quick question.
I think we're almost done with the modeshape-server bundle, we fought a lot with the class loading but now it looks good.
But...
We started this work assuming that replacing the jackrabbit-server bundle was enough to have a sling working, as Carl also confirmed right below.
Probably we still miss something, but we are now struggling with authentication and authorization; in particular two issues:
ModeShape relies on JAAS to check for valid credentials, and at the moment it's complaining that no configuration is found.
We tried to add a jaas config file, made Sling point to that file, but we don't know if there are LoginModules already available or if we need to add one to the classpath (we asked to ModeShape forum and they suggested to look at JBoss Picketbox [1]).
So at the moment we replaced the mechanism of authentication with a custom one, and ModeShape is quite happy with that, even though we would like to align the functionality with what Sling is using and is expecting by jackrabbit.
We came across a strange side-effect there, because now from the web console we cannot do anything without having Sling asking for a login.
Useless to say that whatever we enter, the login fails :(
Going a step further... we're examining the class org.apache.sling.extensions.webconsolesecurityprovider.internal.SlingWebConsoleSecurityProvider, the one that tries to login to the repository passing a SimpleCredentials (triggering the JAAS mechanism skipping our custom one) - method authenticate(String, String).
What scared us was the code just after the repository.login(creds): it seems a bit implementation-dependent, since all the code is into an if (session instanceof JackrabbitSession), otherwise the method will return null (no success).
Do you confirm what we are thinking, that even fixing our current issue, we're going to have a "broken" web console?
Thank you in advance
Ale
On Jan 13, 2011, at 4:11 AM, Carl Hall wrote:
> We (Sakai Project) are working to replace JCR with a non-JCR backend
> (Cassandra and any JDBC; our mail list details the reasons and factors).
> While this isn't JackRabbit -> ModeShape (staying with JCR will be much
> easier), we can certainly attest that changing the storage engine is
> possible with some work. The Sling code does a great job of decoupling
> itself from the storage mechanism.
>
>
> On Fri, Dec 17, 2010 at 10:27 AM, Alessandro Novarini <
> a.novarini@sourcesense.com> wrote:
>
>> Hi Simon,
>>
>> Fine for me, we should start working on the server bundle soon.
>> I'll let you know what our progresses are.
>>
>> Thanks
>> Ale
>>
>>
>> On Dec 17, 2010, at 2:28 PM, Gunzenreiner Simon wrote:
>>
>>> Hi Ale
>>>
>>> I posted this question originally. Just to give you an update on where we
>> stand - we haven't started this work yet, and it probably will be mid
>> January until we do. I suggest we share our findings on this list ...
>>>
>>> Regards
>>> Simon
>>>
>>> -----Ursprüngliche Nachricht-----
>>> Von: Alessandro Novarini [mailto:a.novarini@sourcesense.com]
>>> Gesendet: Mittwoch, 15. Dezember 2010 18:43
>>> An: users@sling.apache.org
>>> Betreff: Sling+ModeShape
>>>
>>> Hello list,
>>>
>>> I've just subscribed because I would like to know if any progress has
>> been made on the replacement of Jackrabbit with another JCR implementation,
>> as discussed here:
>>>
>> http://dev.day.com/discussion-groups/content/lists/sling-users/2010-11/2010-11-16_Replacing_jackrabbit_with_other_JCR_implementation_Gunzenreiner_Simon.html
>>>
>>> I've tried in the last couple of days to work on it too, taking as sample
>> the org.apache.sling.auth.openid bundle, and I've had some hard time because
>> at the moment I have little knowledge of ModeShape; anyway, if there was the
>> will to work openly on the project, I would be glad to contribute in some
>> way.
>>>
>>> I don't have the original thread as email so sorry for not directly
>> replying to it.
>>>
>>> Thanks
>>> Ale
>>
>>